$ rpki-client -vvf rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft File: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft (raw, json) Hash identifier: wjMKwhU1B/lXNcuugODe3hTfjzUhD5k5I92Q/RXQ3BE= Subject key identifier: B1:49:CE:F3:B0:DB:8F:B7:D7:09:9C:A7:85:16:4C:92:BE:D2:94:77 Authority key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE Certificate issuer: /CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft Manifest number: 0144 Signing time: Sat 23 Nov 2024 02:34:23 +0000 Manifest this update: Sat 23 Nov 2024 02:34:23 +0000 Manifest next update: Sat 30 Nov 2024 02:34:23 +0000 Files and hashes: 1: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl (hash: 1BM/BTiWHuWxgrQAS25eDmVYlf72GDPWcjhItwc6ANM=) 2: AB6C302EB5F311EDA0148B2DC4F9AE02.roa (hash: z3Q5zF+FEDFVuismEaJBSvy+GlUJIQ0tTvpv/F4Fp0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE Validity Not Before: Nov 23 02:34:23 2024 GMT Not After : Nov 30 02:34:23 2024 GMT Subject: CN=67413f2f-dd34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b3:a9:a6:14:d9:4c:25:48:b2:62:c7:bf:cb: e1:c2:4f:35:f5:4d:1a:3d:dd:b2:fc:8c:90:a0:2b: 64:df:e4:36:23:e8:f5:85:ba:13:52:43:8b:12:1e: 19:e3:6e:ec:08:05:8b:af:e6:66:ec:d6:fa:1e:32: 68:71:47:c4:b4:a5:f6:99:4e:51:89:29:30:ce:65: 50:85:a9:31:41:b9:9d:40:62:c6:5e:a2:26:63:26: 36:2d:6f:7d:36:c3:2f:d6:cb:5d:d9:f6:7b:b2:a8: d1:52:9e:64:20:9c:8b:f6:92:50:82:63:8c:89:a8: a7:ec:71:a2:34:71:72:f0:5d:10:db:23:6c:30:b9: 4c:61:5a:82:88:4c:f9:95:b5:36:f6:bd:56:02:41: d4:b8:2f:1e:e6:92:52:3d:68:eb:88:d6:73:8e:26: 02:81:ee:b8:02:68:de:b9:7e:bd:22:ca:68:26:3a: 3f:81:67:17:3a:c3:f4:3c:8f:58:3b:7a:9b:9a:2d: 66:9f:6a:b7:db:a3:36:5e:e5:60:07:f3:04:ce:0f: 8c:6c:82:e4:7d:e1:ee:63:64:0e:4e:22:97:55:ab: 52:17:9c:c6:15:f2:db:ed:5f:9b:33:29:b3:45:ce: 1d:90:57:a0:84:42:cb:54:2d:8b:77:10:95:72:d2: d5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:49:CE:F3:B0:DB:8F:B7:D7:09:9C:A7:85:16:4C:92:BE:D2:94:77 X509v3 Authority Key Identifier: keyid:56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:e9:1a:6a:06:9c:de:43:a8:d1:4b:4c:71:81:52:ac:34:1c: 3d:84:46:96:2e:84:ea:88:e8:c8:56:3f:b2:f7:4d:78:2d:73: 33:db:c3:63:b5:26:8e:7d:09:a9:63:05:f4:9a:13:65:69:f3: 84:9d:5e:17:3a:97:26:3c:86:81:cc:6f:01:cf:68:11:94:d1: af:00:98:37:ac:82:33:0e:01:ba:09:c8:f8:14:a1:0a:c2:fa: 64:23:80:5c:48:50:9e:08:5d:b5:cf:b2:9c:1d:f8:45:a7:ee: f7:bb:ce:b9:c1:a6:50:d2:06:fe:af:a9:63:02:b5:6e:8a:ac: d5:87:f5:46:93:cb:87:6e:2a:f5:3b:74:dd:38:af:0f:d5:c5: 3d:ba:3f:f0:42:26:6b:f5:6a:89:47:b6:bc:3e:82:7e:89:27: 26:f1:bb:3c:cd:bd:c8:b9:e7:d7:ce:3d:90:85:9b:69:b0:48: 57:c3:df:4a:6c:bd:90:98:41:e5:8d:7e:b6:40:cc:00:3a:1d: d7:9d:8a:af:56:d4:ac:91:ea:1b:7d:35:27:da:96:97:e3:cc: de:85:84:f0:39:b9:5e:43:6d:66:05:61:09:7f:f3:52:ee:b7: d6:76:9c:b0:45:83:3a:6c:bc:46:2a:13:4e:dd:14:3b:99:06: 1c:55:28:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzQjMxMTAvBgNVBAUTKDU2QkI2RjMxMzdEOEREOUVCOTdFMzgzQkM3RjQ2MUQ5 MEY4NURERkUwHhcNMjQxMTIzMDIzNDIzWhcNMjQxMTMwMDIzNDIzWjAYMRYwFAYD VQQDEw02NzQxM2YyZi1kZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybOpphTZTCVIsmLHv8vhwk819U0aPd2y/IyQoCtk3+Q2I+j1hboTUkOLEh4Z 427sCAWLr+Zm7Nb6HjJocUfEtKX2mU5RiSkwzmVQhakxQbmdQGLGXqImYyY2LW99 NsMv1std2fZ7sqjRUp5kIJyL9pJQgmOMiain7HGiNHFy8F0Q2yNsMLlMYVqCiEz5 lbU29r1WAkHUuC8e5pJSPWjriNZzjiYCge64AmjeuX69IspoJjo/gWcXOsP0PI9Y O3qbmi1mn2q326M2XuVgB/MEzg+MbILkfeHuY2QOTiKXVatSF5zGFfLb7V+bMymz Rc4dkFeghELLVC2LdxCVctLVQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFJzvOw 24+31wmcp4UWTJK+0pR3MB8GA1UdIwQYMBaAFFa7bzE32N2euX44O8f0YdkPhd3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzNCMy9CREZFMThDQ0I1 RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNaNjVmamc3eF9SaDJRLUYz ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZydHZNVGZZM1o2NWZqZzd4X1JoMlEtRjNmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzNCMy9CREZFMThDQ0I1RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNa NjVmamc3eF9SaDJRLUYzZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp6RpqBpzeQ6jRS0xxgVKsNBw9hEaWLoTqiOjIVj+y9014LXMz28Nj tSaOfQmpYwX0mhNlafOEnV4XOpcmPIaBzG8Bz2gRlNGvAJg3rIIzDgG6Ccj4FKEK wvpkI4BcSFCeCF21z7KcHfhFp+73u865waZQ0gb+r6ljArVuiqzVh/VGk8uHbir1 O3TdOK8P1cU9uj/wQiZr9WqJR7a8PoJ+iScm8bs8zb3IuefXzj2QhZtpsEhXw99K bL2QmEHljX62QMwAOh3XnYqvVtSskeobfTUn2paX48zehYTwObleQ21mBWEJf/NS 7rfWdpywRYM6bLxGKhNO3RQ7mQYcVShg -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org